CVE-2023-53561
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-476
Desreferencia a puntero nulo (NULL)
Fecha de publicación:
04/10/2025
Última modificación:
12/02/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: wwan: iosm: fix NULL pointer dereference when removing device<br />
<br />
In suspend and resume cycle, the removal and rescan of device ends<br />
up in NULL pointer dereference.<br />
<br />
During driver initialization, if the ipc_imem_wwan_channel_init()<br />
fails to get the valid device capabilities it returns an error and<br />
further no resource (wwan struct) will be allocated. Now in this<br />
situation if driver removal procedure is initiated it would result<br />
in NULL pointer exception since unallocated wwan struct is dereferenced<br />
inside ipc_wwan_deinit().<br />
<br />
ipc_imem_run_state_worker() to handle the called functions return value<br />
and to release the resource in failure case. It also reports the link<br />
down event in failure cases. The user space application can handle this<br />
event to do a device reset for restoring the device communication.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.14 (incluyendo) | 6.1.30 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (incluyendo) | 6.3.4 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



